supertokens-auth-react

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers cannot independently verify how this release was produced. This is a transparency limitation, though not evidence that the release is unsafe by itself.

Repo bus factorcaution

All 3-month commit activity came from one contributor. Organizational ownership provides handoff capacity, but no second active contributor is shown in this period, so concentration remains a maintenance concern.

Repo commit activitycaution

Only 1 commit was recorded in the last 3 months, indicating weak recent source activity. Recent registry releases provide some compensation, but they do not fully remove the maintenance concern.

Repo issue activitycaution

The repository has 54 open issues and 5 open pull requests, but no new or closed issues or merged pull requests in the last month. This is a modest sign of slower project interaction, partly offset by recent releases.

Repo toolingcaution

The project uses Rollup, Babel, TypeScript, and npm scripts, indicating a conventional build process. No security-scanning tools were detected, which is a minor hygiene gap for an authentication SDK.